CVE-2026-84581

Received Received - Intake

Buffer Overflow in macOS Golden Gate via Malicious Disk Image

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Apple Inc.

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-84581

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos_golden_gate	27
apple	macos_sequoia	15.8
apple	macos_tahoe	26.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow issue caused by insufficient bounds checking. When a maliciously crafted disk image is mounted, it may trigger unexpected system termination or corruption of kernel memory. The issue has been addressed in specific macOS versions: Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.

Detection Guidance

This vulnerability is specific to macOS versions and relates to disk image handling. To detect it, check your macOS version against the fixed releases (Golden Gate 27, Sequoia 15.8, Tahoe 26.7). Use the command 'sw_vers' to verify your macOS version.

Impact Analysis

This vulnerability could lead to system crashes or kernel memory corruption when mounting a malicious disk image. This may result in data loss, application instability, or unauthorized access to sensitive information if kernel memory is compromised.

Mitigation Strategies

Update your macOS to the latest fixed version immediately. Avoid mounting untrusted disk images until the update is applied. Regularly check for and install security updates from Apple.

Hi! I’m here to help you understand CVE-2026-84581. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70